Privacy policy

This explains what personal data Cargoleaf (cargoleaf.eu) handles and why. [Controller legal name, address and contact email: to be completed.]

What we collect

• Account data: name, email address, password (stored only as a hash), company and role.
• Business data you enter or upload: shipments, documents (such as PDFs), partners and permits. These may contain names and contact details of people at your partners.
• Activity data: who changed what and when, so your company has an audit trail.
• Technical data: basic logs needed to run and secure the service.

Why and on what basis

To provide the service you signed up for (contract), to keep it secure and prevent abuse (legitimate interest), and to meet legal obligations. For the business data you upload, your company is the controller and we act as its processor.

Who processes it

• Supabase: database, authentication and file storage, hosted in the EU (Ireland).
• Vercel: application hosting (Dublin region).
• Anthropic: reads uploaded documents to suggest field values. The content is sent only for that purpose.

How long

We keep your data while your company has an account. On request we delete it or return it to you, except what we must keep by law.

Your rights

You can ask for access, correction, deletion, restriction, portability, or object to processing, and you can complain to your data protection authority (in Latvia: Datu valsts inspekcija). Contact: [contact email: to be completed].